Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/txlN9RhVLMqEfR_VH-qxxSt4M3s.roa
File: txlN9RhVLMqEfR_VH-qxxSt4M3s.roa (raw, json)
Hash identifier: CQcIrpPId+Q4z2ndbTVLniXvlSL/wLJ6z6idICg1YhE=
Subject key identifier: B7:19:4D:F5:18:55:2C:CA:84:7D:1F:D5:1F:EA:B1:C5:2B:78:33:7B
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 01A09F3A84545144B7E117D62D54A6D68B26
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/txlN9RhVLMqEfR_VH-qxxSt4M3s.roa
Signing time: Mon 14 Sep 2026 09:23:27 +0000
ROA not before: Mon 14 Sep 2026 09:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 185.62.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:3a:84:54:51:44:b7:e1:17:d6:2d:54:a6:d6:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Sep 14 09:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7194df518552cca847d1fd51feab1c52b78337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:c7:5d:e0:a7:9d:fa:ff:56:9a:e6:4b:ae:
d5:35:15:4d:cb:18:1e:28:1d:3a:01:d5:e3:6d:b4:
de:83:9b:c8:99:56:0c:8e:ba:81:77:2f:79:19:5f:
c5:8d:a6:62:dd:e4:e4:4d:7f:b2:4b:03:6b:f4:df:
11:43:3f:aa:f3:6b:33:cb:ed:35:cc:7d:79:da:51:
5b:f8:d9:61:76:99:ef:0c:69:eb:12:ec:81:81:b8:
f6:d8:bf:2e:75:eb:8e:f7:b6:ba:86:43:ef:d1:0c:
15:fa:02:7e:41:e4:bc:e4:12:a9:d9:1e:3a:f0:53:
52:dc:d8:ed:bd:8a:5d:02:b2:77:52:12:a9:01:ca:
13:16:d0:47:e4:d3:49:9d:26:93:a7:1c:0f:cd:e6:
c0:d9:1a:48:ad:86:7e:6e:47:bd:8f:6c:36:0b:19:
a7:63:c3:26:30:99:6a:6f:10:a0:32:f1:be:fb:6a:
de:23:7d:4a:16:73:e1:9f:90:07:90:a4:26:a6:ca:
03:0b:bc:ed:de:e5:24:2a:9f:41:6d:1f:ce:30:aa:
e5:3d:ca:c0:93:26:68:8d:a0:1d:ac:f7:22:49:ad:
ae:13:93:6c:e9:28:d1:22:2b:0d:a2:f0:ae:3f:19:
47:88:8e:fe:fa:70:cc:85:d0:f5:4a:1b:02:5c:b1:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:4D:F5:18:55:2C:CA:84:7D:1F:D5:1F:EA:B1:C5:2B:78:33:7B
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/txlN9RhVLMqEfR_VH-qxxSt4M3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.9.0/24
Signature Algorithm: sha256WithRSAEncryption
af:71:cd:b8:1e:5b:19:f9:29:42:2f:96:63:b6:a3:ad:9d:2c:
f4:5b:c2:2b:f1:ae:e7:3b:d6:6c:f2:24:c4:8f:a5:f1:94:e6:
2c:29:69:c6:56:d9:4d:e0:b4:80:9b:07:b3:1d:2c:d0:41:4f:
01:96:ca:0c:57:b5:f5:45:17:ae:e1:9b:3b:bf:cb:6c:b2:4a:
3e:9e:88:df:9a:45:13:10:0e:62:03:06:8e:6a:a1:ef:79:48:
c0:62:1d:39:0a:35:a4:05:79:3d:bd:5b:39:4f:ad:a8:6f:fe:
c3:33:f4:1b:2d:b7:d2:5a:d6:aa:4f:df:ca:3a:ad:c8:a0:3f:
e2:5c:de:fa:9e:2e:08:dd:b1:48:53:ba:58:4a:a7:26:8c:d0:
18:06:1b:b9:c1:be:f4:79:b1:9e:fe:2f:43:fb:e6:d5:39:32:
5d:b1:ba:fb:19:31:8e:1c:73:e9:f5:8a:2f:55:97:b3:9e:8b:
c9:30:03:9d:eb:77:d5:f0:91:8f:f5:6b:b4:fd:16:18:89:1e:
74:51:a3:10:d0:77:0f:a3:2d:98:02:57:f0:f0:24:3c:b0:99:
9f:7f:59:18:b7:c0:d2:b4:78:56:ef:91:a8:4f:21:d8:d4:59:
33:9e:80:6e:6e:e6:44:bd:8d:6e:a3:e2:72:80:76:6a:8b:82:
6c:12:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:28:37 2026 by rpki-client